General
-
Target
60a08739c2125115966b1f4546f02d6b5ddeff0d0339d9192aa3a907078a6d6a
-
Size
4.0MB
-
Sample
221201-xglyzshh54
-
MD5
e5ef70e4bbf868000b8a0da98686ca27
-
SHA1
279fb0247e6bd1b0b8ca5c405662ca775cf9669e
-
SHA256
60a08739c2125115966b1f4546f02d6b5ddeff0d0339d9192aa3a907078a6d6a
-
SHA512
19d23b80946d69853c60e76beac62c3631c2c5a5b87c87e3ebd43ba5ff3c4abcdfff31f1d87a97f0dd7c174d1de9360284bed64ca96fec86bad54b4fc5d23f48
-
SSDEEP
98304:33rxGzoOoGNDmgp5IwTMVXcGpoSciTnRjlmz/l4C8woa0xGsvxe:33MoGNzPIQ4SS7QZ8w50os5e
Static task
static1
Malware Config
Targets
-
-
Target
60a08739c2125115966b1f4546f02d6b5ddeff0d0339d9192aa3a907078a6d6a
-
Size
4.0MB
-
MD5
e5ef70e4bbf868000b8a0da98686ca27
-
SHA1
279fb0247e6bd1b0b8ca5c405662ca775cf9669e
-
SHA256
60a08739c2125115966b1f4546f02d6b5ddeff0d0339d9192aa3a907078a6d6a
-
SHA512
19d23b80946d69853c60e76beac62c3631c2c5a5b87c87e3ebd43ba5ff3c4abcdfff31f1d87a97f0dd7c174d1de9360284bed64ca96fec86bad54b4fc5d23f48
-
SSDEEP
98304:33rxGzoOoGNDmgp5IwTMVXcGpoSciTnRjlmz/l4C8woa0xGsvxe:33MoGNzPIQ4SS7QZ8w50os5e
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-